{
    "cluster_permissions": [
      "indices:data/read/get",
      "indices:data/read/scroll",
      "indices:data/read/field_caps"
    ],
    "index_permissions": [
      {
        "allowed_actions": [
          "read"
        ],
        "index_patterns": [
          "rn-a-b-c-d-e-f-service*"
        ]
      }
    ]
  }